Lucene search

PRIOn knowledge basePRION:CVE-2023-28660

HistoryMar 22, 2023 - 9:15 p.m.

Sql injection

2023-03-2221:15:00

PRIOn knowledge base

www.prio-n.com

events made easy

wordpress plugin

sql injection

authenticated

search name parameter

vulnerability

nvd

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.2%

JSON

The Events Made Easy WordPress Plugin, version <= 2.3.14 is affected by an authenticated SQL injection vulnerability in the ‘search_name’ parameter in the eme_recurrences_list action.

CPENameOperatorVersion
events_made_easyle2.3.14

CPE	Name	Operator	Version
	events_made_easy	le	2.3.14

References

www.tenable.com/security/research/tra-2023-2